You can set the firewall to debug mode in the client interface policies.
Then rerun your test and check/post the Firesvc.log from your test laptop.
Thanks for the info.
I enabled debugging and found the logs.
It shows finding 2 network devices (wireless card is off). and then it shows that the CAG group is currently applied to the wired network, i have just called the CAG group ' Internal network' for now.
I re-checked everything and chrome still does not work but firefox works fine (these are the only two applications in my cag group for testing.
Im guessing chrome updated and needs new rules or something.... I can see this is going to be fun managing the firewall....
thanks very much for your help!